Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: gCIthTpAKu/giHa72cbVO6fhnW5KCKH4oBsGlDVinnE=
Subject key identifier: 20:3D:D8:5B:A9:84:B9:97:91:84:E9:9D:0B:AF:46:07:8D:EF:63:05
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 019A4E18C00D8B2F8C5A57D7E53359F64597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: dJ89N2hPzbrL914vOcIS2Y815Q+8O4bP0hne5iZfUyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c0:0d:8b:2f:8c:5a:57:d7:e5:33:59:f6:45:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=203dd85ba984b9979184e99d0baf46078def6305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:7e:a2:4a:f7:7e:4d:ba:e1:80:36:fc:55:
6b:fc:3e:e6:1c:61:6e:7c:6c:ce:8b:d9:f2:c3:1b:
9a:17:e5:73:3d:73:32:c6:c6:46:4c:55:2b:5e:32:
5b:63:3b:d4:a4:bb:c9:92:0a:36:3b:d4:23:39:bd:
ff:95:a8:e9:05:c7:48:39:5a:b4:9e:f7:30:fa:2d:
9c:52:02:a7:fc:c2:27:bf:df:1b:af:8d:9f:56:e7:
97:ff:1b:af:34:82:80:d2:82:43:e6:6d:e8:da:ff:
67:a1:6f:fd:91:fd:c9:2a:30:50:78:c9:f9:2b:fd:
29:2a:34:ce:74:08:61:9e:25:64:63:aa:f5:33:a2:
03:77:85:b6:dc:27:cb:da:f6:87:6c:3e:8f:8e:b8:
f2:67:63:a5:b8:a4:38:f9:5a:69:02:1c:05:a8:9b:
53:89:fc:36:62:a9:ff:ea:72:e0:34:ee:40:d5:67:
47:a6:55:5a:6f:23:fa:98:a5:e4:51:b4:c9:92:56:
fe:2e:ec:ae:59:7e:1e:70:91:f0:5c:c5:1f:cd:44:
fe:0f:fc:64:ac:3a:5b:91:85:68:0c:c7:da:31:2f:
8e:45:e8:67:9a:d0:c4:60:7d:5d:f2:ca:6f:d0:02:
4d:b9:11:b6:4d:e5:68:9b:32:74:bd:7f:1c:36:49:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:D8:5B:A9:84:B9:97:91:84:E9:9D:0B:AF:46:07:8D:EF:63:05
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b3:6c:57:e3:e3:e1:16:20:db:dc:20:e3:dc:2e:90:e1:d8:
3f:25:c8:3d:df:28:bc:18:96:27:38:13:cf:9e:d9:19:8e:65:
a8:7e:fc:8d:c7:b0:12:ca:20:b6:b6:b2:b1:0b:05:15:54:1f:
a8:6a:39:64:e7:f0:de:15:71:63:76:c2:30:d3:00:c4:b2:51:
87:c0:40:fe:3d:d6:c4:d1:28:84:20:11:9c:89:b0:90:ca:9b:
e7:1b:42:19:ae:d7:d4:ed:7b:8e:27:68:ff:16:3c:a2:27:20:
79:fb:85:11:8c:e0:d7:47:80:9d:d8:45:32:3a:ad:64:c9:bd:
c8:65:a3:03:a8:46:25:7e:1c:dd:a0:46:18:7e:6b:63:02:dd:
62:54:b1:19:76:c7:7f:77:c2:6e:0c:d6:48:d0:11:31:16:4b:
e3:4b:74:b1:c7:4c:17:1d:18:ec:44:67:e7:d5:dc:e4:e9:a0:
47:09:d0:16:cd:44:40:c3:0f:1b:16:c8:87:d9:20:fb:e9:3b:
c9:41:7d:bd:2a:b2:29:47:84:5b:3e:51:6e:c9:9e:3d:7a:ca:
e1:ec:9f:aa:17:bc:66:86:25:bc:6d:de:cd:46:eb:b0:1a:ef:
a4:b6:fb:b4:2b:54:00:7d:46:f5:4d:e1:bb:d9:41:15:c5:d7:
db:27:30:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGMANiy+MWlfX5TNZ9kWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw
NGQzM2YwHhcNMjUxMTA0MDkwMDM1WhcNMjUxMTA1MDkwMDM1WjAzMTEwLwYDVQQD
EygyMDNkZDg1YmE5ODRiOTk3OTE4NGU5OWQwYmFmNDYwNzhkZWY2MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs09+okr3fk264YA2/FVr/D7mHGFu
fGzOi9nywxuaF+VzPXMyxsZGTFUrXjJbYzvUpLvJkgo2O9QjOb3/lajpBcdIOVq0
nvcw+i2cUgKn/MInv98br42fVueX/xuvNIKA0oJD5m3o2v9noW/9kf3JKjBQeMn5
K/0pKjTOdAhhniVkY6r1M6IDd4W23CfL2vaHbD6PjrjyZ2OluKQ4+VppAhwFqJtT
ifw2Yqn/6nLgNO5A1WdHplVabyP6mKXkUbTJklb+LuyuWX4ecJHwXMUfzUT+D/xk
rDpbkYVoDMfaMS+ORehnmtDEYH1d8spv0AJNuRG2TeVomzJ0vX8cNkn90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA92FuphLmXkYTpnQuvRgeN72MFMB8GA1UdIwQY
MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt
ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl
LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELNsV+Pj
4RYg29wg49wukOHYPyXIPd8ovBiWJzgTz57ZGY5lqH78jcewEsogtraysQsFFVQf
qGo5ZOfw3hVxY3bCMNMAxLJRh8BA/j3WxNEohCARnImwkMqb5xtCGa7X1O17jido
/xY8oicgefuFEYzg10eAndhFMjqtZMm9yGWjA6hGJX4c3aBGGH5rYwLdYlSxGXbH
f3fCbgzWSNARMRZL40t0scdMFx0Y7ERn59Xc5OmgRwnQFs1EQMMPGxbIh9kg++k7
yUF9vSqyKUeEWz5RbsmePXrK4eyfqhe8ZoYlvG3ezUbrsBrvpLb7tCtUAH1G9U3h
u9lBFcXX2ycwpA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:44 2025 by rpki-client